# Strong

状态：active
Platform：android
Package：io.strongapp.strong
Version：v6.2.1
Opportunity：2026-06-10-strong-workout-tracker-gym-log

## 摘要

- 包类型：xapk，inner APK 数：3
- 引擎 / 框架：native
- SDK 线索：firebase
- Endpoint candidates：1
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is io.strongapp.strong（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 20 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 1 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 3 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.POST_PROMOTED_NOTIFICATIONS`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.SCHEDULE_EXACT_ALARM`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.health.READ_BODY_FAT`
- `android.permission.health.READ_NUTRITION`
- `android.permission.health.READ_WEIGHT`
- `android.permission.health.WRITE_BODY_FAT`
- `android.permission.health.WRITE_EXERCISE`
- `android.permission.health.WRITE_WEIGHT`
- `com.android.vending.BILLING`
- `io.strongapp.strong.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：androidx.credentials.playservices.controllers.identityauth.HiddenActivity, androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.canhub.cropper.CropImageActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, io.strongapp.strong.ViewPermissionUsageActivity, io.strongapp.strong.share.DeepLinkReceiverActivity, io.strongapp.strong.ui.apple.AppleReturnReceiverActivity, io.strongapp.strong.ui.apple.FacebookReturnActivity, io.strongapp.strong.ui.fullscreen_charts.FullScreenChartActivity, io.strongapp.strong.ui.health_connect.HealthConnectSettingsActivity, io.strongapp.strong.ui.health_connect.PermissionsRationaleActivity, io.strongapp.strong.ui.intro.ActivityIntro, io.strongapp.strong.ui.log_workout.AddExerciseActivity, io.strongapp.strong.ui.log_workout.LogWorkoutActivity, io.strongapp.strong.ui.log_workout.finish_workout.FinishWorkoutActivity, io.strongapp.strong.ui.log_workout.rest_timer_mechanics.RestTimerMechanicsActivity, io.strongapp.strong.ui.log_workout.warm_up.WarmUpSetsActivityDialog, io.strongapp.strong.ui.main.MainActivity, io.strongapp.strong.ui.main.UpgradeRequired, io.strongapp.strong.ui.main.exercises.ExerciseInstructionsActivity, io.strongapp.strong.ui.main.exercises.archived_measurements.ArchivedMeasurementsActivity, io.strongapp.strong.ui.main.exercises.exercise_detail.ExerciseDetailActivity, io.strongapp.strong.ui.main.exercises.new_exercise.NewExerciseActivity, io.strongapp.strong.ui.main.exercises.new_exercise.edit_cell_types.EditCellTypesActivity, io.strongapp.strong.ui.main.exercises.records_detail.ExerciseRecordsDetailActivity, io.strongapp.strong.ui.main.feed.expanded_workout.ExpandedWorkoutActivity, io.strongapp.strong.ui.main.measurements.LogMeasurementDialogActivity, io.strongapp.strong.ui.main.profile.widgets.nutrition.dialogs.DailyMacroDialogActivity, io.strongapp.strong.ui.main.profile.widgets.nutrition.dialogs.NumberChooserDialogActivity, io.strongapp.strong.ui.main.routines.archived_templates.ArchivedTemplatesActivity, io.strongapp.strong.ui.main.routines.preview.ExpandedTemplateActivity, io.strongapp.strong.ui.settings.AppearanceChooserActivity, io.strongapp.strong.ui.settings.BarsActivity, io.strongapp.strong.ui.settings.ChangePasswordActivity, io.strongapp.strong.ui.settings.ImportCsvActivity, io.strongapp.strong.ui.settings.RMFormulaActivity, io.strongapp.strong.ui.settings.SettingsActivity, io.strongapp.strong.ui.settings.StatisticsDateActivity, io.strongapp.strong.ui.settings.edit_profile.EditProfileActivity, io.strongapp.strong.ui.settings.plates.PlatesActivity, io.strongapp.strong.ui.store.UpgradeActivity, pl.brightinventions.slf4android.NotifyDeveloperDialogDisplayActivity
- Services：androidx.credentials.playservices.CredentialProviderMetadataHolder, androidx.health.platform.client.impl.sdkservice.HealthDataSdkService, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.auth.api.signin.RevocationBoundService, io.strongapp.strong.core.wear.PhoneSignInListenerService, io.strongapp.strong.services.SnoozeService, io.strongapp.strong.ui.log_workout.RestTimerService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, io.strongapp.strong.os_widgets.WorkoutPerWeekWidget, io.strongapp.strong.ui.log_workout.LogWorkoutReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, com.canhub.cropper.CropFileProvider, com.squareup.picasso.PicassoProvider, io.sentry.android.core.SentryInitProvider, io.sentry.android.core.SentryPerformanceProvider

## SDK / Endpoint

### SDK

- `firebase`

### Endpoint candidates

- http://www.apache.org/licenses/

## Warnings

- apktool manifest decode skipped 2 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。